Nous Research vulnerabilities
We track 1 vulnerability in Nous Research products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 21, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Nous Research vulnerabilities
- 7.5 High severity
Hermes Agent: Incorrect Authorization
The webhook platform gateway in Nous Research Hermes Agent versions builds the session chat_id as webhook:{route_name}:{delivery_id} and re-derives the authorizing route by splitting that string, so a route name containing a ":" resolves toolset authorization